Facebook orkut xss tricks

XSS on Yaari.com

http://digitalpbk.blogspot.com/2007/04/xss-on-yaaricom.html XSS on Yaari.com Lots of friendship network sites are coming up these days following the success of orkut. Another one supposedly originating from the same stanford university is yaari.com targeted at mainly Indian users. The site looks and functionality seems fine but is full of XSS holes (Cross Site Scripting). Almost all the fields can be bugged. Only thing that amazes me is that the site has used PHP. PHP has such a wonderful list of functions that can take care of the XSS problem. I wonder ...

This is what happens when you develop Orkut and Facebook Applications Simultaneously

http://digitalpbk.blogspot.com/2009/07/orkut-facebook-app-funny.html This is what happens when you develop Orkut and Facebook Applications Simultaneously The thingNeed I explain more?Just in case, its a dialog to add the application profile view into your Facebook profile, within Orkut.Technical DetailsIts just the Session variables screwing up, everything is fine. Although I could not resist putting up a screen shot of it. Are you an application developer? Let me know... ...

XSS - Part 2 (Cookie stealing and Defacement)

http://digitalpbk.blogspot.com/2006/12/xss-part-2-cookie-stealing-and.html XSS - Part 2 (Cookie stealing and Defacement) Please note that this article is for educational purposes only, and is targeted at webmasters who have never seen this scenario. Please donot harm anyone. Disclaimer : I am not responsible for any damages arising due to methods specified in this page. Webmasters please fix it ASAP.In the first part we injected javascript successfully, and we got an alert. Now let us move to step 2 , defacing and cookie stealing.Cookie Stealing using XSSCookie ...

PyFacebook Download Python Facebook API Library

http://digitalpbk.com/pyfacebook/pyfacebook-download-python-facebook-api-library PyFacebook Download Python Facebook API Library PyFacebook is the official Facebook API Library written in Python. It is maintained in github, I have attached a snapshot of the master trunk zip file with this post. Python Facebook Software ...

SSH Tunneling Proxy using Putty on Windows and Linux (Unblock YouTube / Orkut / Facebook)

http://digitalpbk.blogspot.com/2009/05/ssh-proxy-windows-linux-orkut-bypass.html SSH Tunneling Proxy using Putty on Windows and Linux (Unblock YouTube / Orkut / Facebook) SSH Tunneling?SSH Tunneling is the method by which, requests from our local system is encapsulated in an SSH session and forwarded to a remote computer, which then sends the requests as if they originated from the remote computer.Using this method we can set up Socks (V5) Proxies to access websites. This method is used for anonymous browsing as well as for accessing Blocked sites within the local network ...

Orkut YouTube Facebook etc Blocked ?? Follow this guide to Unblock

http://digitalpbk.blogspot.com/2009/05/orkut-youtube-facebook-blocked-ssh.html Orkut YouTube Facebook etc Blocked ?? Follow this guide to Unblock Blocked ??!!!Most of you may be out there to desparately find out how to unblock all these social networking sites. The solution is to use a proxy. You can use proxy sites available all over the internet, or set up your on SSH proxy if you have an SSH server. Setting up an SSH server is easy. If you have a machine at home, install any linux distribution with SSH server enabled. Now grab hold of your Home machine IP address ...

Photoshop Resize Batch images in a directory

http://digitalpbk.com/photoshop/photoshop-resize-batch-images-directory Photoshop Resize Batch images in a directory Nowadays most camera's produce so big photos like you could make a big banner with those. Inorder to upload photos to web to photo sharing services like Flickr or Picasa, or Social Networking sites such as Orkut and Facebook, we should reduce the image resolution ie (Width & Height) scale down the image so that it can be uploaded quick and easily. For those who have photoshop CS3 installed, there is a quick and easy way to scale the images ...

XSS on JustDial.com

http://digitalpbk.blogspot.com/2007/04/xss-on-justdialcom.html XSS on JustDial.com JustDial.comSaw the ad a few days back on the TV, so thought could play with it. As expected, they haven't thought/bothered about Cross Site Scripting !Just search for our usual keyword : alert("XSS"); and you can get alerts.The reason for most XSS holes is due to the use of Microsoft's Active Server Pages (ASP). ASP does not have much default functions or modules to combat XSS. Whereas PHP has a number of functions to do the same.Happy Hacking ... ...

Google search goes social with Social Search Results - The Facebook effect ?

http://digitalpbk.com/google/google-search-social-results-beta Google search goes social with Social Search Results - The Facebook effect ? The following is the screenshot of Google Search result page when searched for something my friend has blogged on. Is google moving towards a social networking side ? Google is slowly adding the "Social" aspect to all its products. After launching Buzz on Gmail, "Social Results" aspect in "Google Search" results too reveals this trend. Google seems to be worried about the immense ...

Fix for Facebook authentication on IE

http://digitalpbk.blogspot.com/2009/08/facebook-auth-next-parameter-ie.html Fix for Facebook authentication on IE What?This is for Facebook developers who have faced this problem. If you are using an Facebook application to authenticate a user on a PHP website, the Facebook redirection on Internet Explorer specifically fails the login of the user. This is because the return URL returned by facebook specifically for IE is the appending of the CallBack URL specified in the Application +the Next parameter + a "?" + the auth_token parameter.This results ...